fleet/schema/tables/users.yml
Eric 02437a098e
Schema: change default block scalar used in schema override files (#19296)
Closes: #19271
Closes: #19286

Changes:
- Updated the example in the schema folder readme
- Updated the block scalar used in Fleet's osquery override
documentation (`>-` » `|-`) and removed extra newlines
- Updated the block scalar used in URLs used to create new yaml override
files
- Regenerated osqeury_fleet_schema.json
2024-05-27 18:18:56 -05:00

63 lines
1.1 KiB
YAML

name: users
platforms:
- darwin
- windows
- linux
- chrome
examples: |-
List users that have interactive access via a shell that isn't false.
```
SELECT * FROM users WHERE shell!='/usr/bin/false';
```
columns:
- name: gid
platforms:
- darwin
- windows
- linux
- name: uid_signed
platforms:
- darwin
- windows
- linux
- name: gid_signed
platforms:
- darwin
- windows
- linux
- name: description
platforms:
- darwin
- windows
- linux
- name: directory
platforms:
- darwin
- windows
- linux
- name: shell
platforms:
- darwin
- windows
- linux
- name: uuid
- name: email
required: false
type: text
description: Email
platforms:
- chrome
- name: type
platforms:
- windows
- name: is_hidden
platforms:
- darwin
- name: pid_with_namespace
platforms:
- linux
- name: username
description: Username
notes: |-
- On ChromeOS, this table requires the [fleetd Chrome extension](https://fleetdm.com/docs/using-fleet/chromeos).